Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/391d8efb-227b-3642-9158-e4297f10e1a9.roa
File:                     391d8efb-227b-3642-9158-e4297f10e1a9.roa (raw, json)
Hash identifier:          LJWtJLA6KJA/fZ/u0TCbVi3uOkNqi1wxn+2NX0LNLOE=
Subject key identifier:   F9:7A:46:33:82:58:54:3B:19:19:56:54:EF:FF:B0:5B:15:82:88:56
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584BB2F7A8E22A1FA293FAFC6B80
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/391d8efb-227b-3642-9158-e4297f10e1a9.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     7029
IP address blocks:        45.43.4.0/24 maxlen: 24
                          45.43.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:a8:e2:2a:1f:a2:93:fa:fc:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=32d2fb18-3be3-44c3-873e-79ef9c2ef1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:5a:04:e8:c0:66:5b:c3:0f:c0:27:06:c7:
                    a8:30:c9:d7:88:2f:b0:9b:5b:b5:ab:d6:e3:21:66:
                    6a:97:69:d2:12:67:52:42:03:e7:61:4f:2b:5e:fd:
                    4f:93:8c:b8:a5:70:77:d7:9d:2a:82:0e:ee:42:83:
                    0a:36:ec:1f:da:6a:b0:f0:cf:f3:cd:fc:ec:af:95:
                    d0:92:37:36:68:7f:28:0c:7f:74:a2:c4:54:6f:51:
                    59:69:a8:1a:80:5f:dc:0a:60:4b:b7:ef:1a:88:90:
                    37:f8:d9:0c:95:fe:6b:da:2f:8e:34:99:8f:d7:fb:
                    c3:89:a9:a0:44:bb:7b:34:09:30:92:8f:9e:df:f9:
                    74:fe:58:9e:a6:6c:20:a5:b5:3d:a1:6b:e0:4c:26:
                    ec:45:29:74:9d:30:d6:87:0f:69:72:83:8e:c6:b8:
                    e0:d4:6b:1b:be:4c:c8:90:71:01:e9:6c:26:37:04:
                    34:05:de:e7:7b:95:f4:ec:a8:87:d4:ed:23:a2:00:
                    25:b5:5f:25:0a:d5:50:18:79:c5:43:69:38:2a:31:
                    34:97:e9:6f:ec:89:db:db:50:dc:fd:e2:e0:bd:39:
                    41:62:ab:c6:1b:f5:b7:4c:71:e2:6a:ee:0f:1d:0b:
                    4a:4a:bc:68:b8:d5:32:9b:de:11:52:0e:b4:d9:b4:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:46:33:82:58:54:3B:19:19:56:54:EF:FF:B0:5B:15:82:88:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/391d8efb-227b-3642-9158-e4297f10e1a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.4.0/24
                  45.43.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:9d:62:98:96:91:91:00:72:95:4e:26:4e:dd:02:c3:82:
         60:65:14:bd:81:6c:c3:86:df:2b:47:00:bf:fd:82:03:fe:de:
         26:62:52:9d:08:f2:ed:ff:0b:2b:f9:56:f8:ee:2e:56:2a:15:
         4d:0f:66:a3:aa:ca:2f:22:3a:fd:84:fa:a7:11:b1:f1:95:0f:
         d4:3d:e8:75:b2:38:74:93:3b:15:08:22:79:ed:a4:d9:92:e7:
         b9:f1:74:4f:60:23:91:e4:2a:f6:d1:45:52:1a:33:0f:3f:c2:
         c1:1f:f8:7a:ae:5a:26:1b:68:b8:ef:7d:89:dc:03:d7:5f:ea:
         b9:de:09:6d:b2:1e:68:f8:43:a1:da:fe:2f:2c:46:70:aa:38:
         71:99:18:f8:a1:af:7f:42:52:bf:18:c4:d8:a8:e5:1a:74:14:
         c2:57:a9:da:ca:02:d4:0d:4e:89:4b:a8:7f:1c:61:c7:c6:7d:
         25:aa:dd:6d:b5:2b:6b:d6:6d:2d:7f:e8:10:2b:92:ed:a4:81:
         ad:40:89:df:70:a9:b4:7b:02:d3:db:97:00:e4:a0:ec:69:2f:
         f5:ee:d9:85:5c:74:8c:84:84:74:be:50:e6:4a:cc:84:29:93:
         2f:4d:00:ca:eb:9a:47:9b:88:b4:36:90:d4:63:79:cb:d7:ac:
         af:bf:64:e9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuy96jiKh+ik/r8a4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0
NjU4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
MzJkMmZiMTgtM2JlMy00NGMzLTg3M2UtNzllZjljMmVmMWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonhaBOjAZlvDD8AnBseoMMnXiC+wm1u1q9bj
IWZql2nSEmdSQgPnYU8rXv1Pk4y4pXB3150qgg7uQoMKNuwf2mqw8M/zzfzsr5XQ
kjc2aH8oDH90osRUb1FZaagagF/cCmBLt+8aiJA3+NkMlf5r2i+ONJmP1/vDiamg
RLt7NAkwko+e3/l0/liepmwgpbU9oWvgTCbsRSl0nTDWhw9pcoOOxrjg1GsbvkzI
kHEB6WwmNwQ0Bd7ne5X07KiH1O0jogAltV8lCtVQGHnFQ2k4KjE0l+lv7Inb21Dc
/eLgvTlBYqvGG/W3THHiau4PHQtKSrxouNUym94RUg602bTRLQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPl6RjOCWFQ7GRlWVO//sFsVgohWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm
MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMzkxZDhlZmItMjI3Yi0z
NjQyLTkxNTgtZTQyOTdmMTBlMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk
ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz
NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz
NzY1MzQ2NTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSsEAwQA
LSsZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAA3rnWKYlpGRAHKVTiZO3QLDgmBlFL2BbMOG3ytHAL/9ggP+
3iZiUp0I8u3/Cyv5VvjuLlYqFU0PZqOqyi8iOv2E+qcRsfGVD9Q96HWyOHSTOxUI
InntpNmS57nxdE9gI5HkKvbRRVIaMw8/wsEf+HquWiYbaLjvfYncA9df6rneCW2y
Hmj4Q6Ha/i8sRnCqOHGZGPihr39CUr8YxNio5Rp0FMJXqdrKAtQNTolLqH8cYcfG
fSWq3W21K2vWbS1/6BArku2kga1Aid9wqbR7AtPblwDkoOxpL/Xu2YVcdIyEhHS+
UOZKzIQpky9NAMrrmkebiLQ2kNRjecvXrK+/ZOk=
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:00:18 2025 by rpki-client